domains / families / security / performing-threat-modeling-with-owasp-threat-dragon

performing-threat-modeling-with-owasp-threat-dragon

separate

Uses OWASP Threat Dragon (web or desktop) to build data flow diagrams, identify threats with STRIDE, LINDDUN, CIA, DIE, or PLOT4ai methodologies via its auto-generation rule engine, and produce PDF threat model reports. Use during secure design review of an application architecture to build a formal threat model and document mitigations for GRC compliance.

When to use

• When conducting security assessments that involve performing threat modeling with owasp threat dragon
• When following incident response procedures for related security events
• When performing scheduled security testing or auditing activities
• When validating security controls through hands-on testing

Skill page

Source